file[.]exe | Triage™

General

Target
file.exe
Size 207KB
Sample230920-1d7cascg86
SHA256 85630537714d5da40be00a1d0d43a52d17eedb10ea08785541b2e663231e05d1
MD5 9a4569b1b426ff858d74f0375ebe3195
SHA1 b7cc26581826c7df0b2b4b2e545c86de7a446a79
SHA512 eb60e2221fa87769b74ec99dd2dce308062d53e21e9e0d826159bf1c117d64ec1838f610e27a2720e4af00cbf98d6ebbaf1992ce5f830f07b248442bcb838101
SSDEEP 3072:/Xt3eLxSje9uifyLyK628zceu0QMQyGVP4ceBjC5Bu7T/qL6:vAV6e9uoM78zc776o4ceYu7TCL6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 207KB

file.exe

IMPHASH d13f0a4e1c3acd1a644a413a45b35009
SHA256 85630537714d5da40be00a1d0d43a52d17eedb10ea08785541b2e663231e05d1
MD5 9a4569b1b426ff858d74f0375ebe3195
SHA1 b7cc26581826c7df0b2b4b2e545c86de7a446a79
SHA512 eb60e2221fa87769b74ec99dd2dce308062d53e21e9e0d826159bf1c117d64ec1838f610e27a2720e4af00cbf98d6ebbaf1992ce5f830f07b248442bcb838101
SSDEEP 3072:/Xt3eLxSje9uifyLyK628zceu0QMQyGVP4ceBjC5Bu7T/qL6:vAV6e9uoM78zc776o4ceYu7TCL6
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

22241

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetThreadContext FindFirstChangeNotificationW SetFilePointer PeekNamedPipe SetConsoleTextAttribute OpenJobObjectA InterlockedCompareExchange WriteConsoleInputA FreeEnvironmentStringsA GetTickCount GetDateFormatA LoadLibraryW SizeofResource GetFileAttributesA FindNextVolumeW FileTimeToSystemTime GetGeoInfoA CreateFileW SetThreadPriority GlobalUnlock GetLogicalDriveStringsA EnumResourceNamesW ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc BackupWrite GetTempFileNameA CreateHardLinkW BeginUpdateResourceA FoldStringW GetModuleFileNameA FindNextFileA GetShortPathNameW OpenSemaphoreW FindFirstVolumeW GetConsoleProcessList HeapSize GetLastError HeapFree GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc RtlUnwind SetHandleCount GetStdHandle GetFileType GetModuleHandleW Sleep ExitProcess WriteFile GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA GetModuleHandleA GetConsoleCP GetConsoleMode LoadLibraryA RaiseException LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle SetEndOfFile GetProcessHeap ReadFile WriteConsoleA GetConsoleOutputCP WriteConsoleW

user32

GetClassInfoExA GetMessageExtraInfo LoadMenuA CharToOemBuffA

advapi32

InitiateSystemShutdownA

Sharing